Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AqEDqu5RNh8FtMjeyGnkWhPCVgLS2uqf4ymRhUK7r9EV/1/323830343a353938343a623430303a3a2f34302d3430203d3e20323730393636.roa
File:                     323830343a353938343a623430303a3a2f34302d3430203d3e20323730393636.roa (raw, json)
Hash identifier:          6APJr557IK26wMdsXXCCp50MjDp90nL0eMCMKSwE0oU=
Subject key identifier:   C3:1D:52:7E:DD:2C:35:27:4C:99:5B:5D:68:47:9C:B0:68:D9:A6:AA
Certificate issuer:       /CN=CC95D6B1D2D0DBC38C7E7AAAA395D22249D491DB
Certificate serial:       231805872C673E05DD33383404144A22C81DA758
Authority key identifier: CC:95:D6:B1:D2:D0:DB:C3:8C:7E:7A:AA:A3:95:D2:22:49:D4:91:DB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CC95D6B1D2D0DBC38C7E7AAAA395D22249D491DB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AqEDqu5RNh8FtMjeyGnkWhPCVgLS2uqf4ymRhUK7r9EV/1/323830343a353938343a623430303a3a2f34302d3430203d3e20323730393636.roa
Signing time:             Thu 04 Apr 2024 00:32:45 +0000
ROA not before:           Thu 04 Apr 2024 00:27:45 +0000
ROA not after:            Thu 03 Apr 2025 00:32:45 +0000
asID:                     270966
IP address blocks:        2804:5984:b400::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:18:05:87:2c:67:3e:05:dd:33:38:34:04:14:4a:22:c8:1d:a7:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CC95D6B1D2D0DBC38C7E7AAAA395D22249D491DB
        Validity
            Not Before: Apr  4 00:27:45 2024 GMT
            Not After : Apr  3 00:32:45 2025 GMT
        Subject: CN=C31D527EDD2C35274C995B5D68479CB068D9A6AA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:af:15:30:99:08:40:d0:78:90:88:de:1c:ae:
                    cc:cc:56:fd:d9:0a:d1:b2:ff:ae:a4:62:8b:ee:40:
                    1f:8f:47:7b:e9:1e:00:5a:0e:ed:d4:03:a3:05:55:
                    f4:5d:a8:c1:8e:8d:91:6e:5b:f2:9c:46:c4:bb:65:
                    27:da:38:b3:f9:8e:98:f2:d6:61:2b:cb:1e:3c:23:
                    d0:e3:e8:e3:b8:47:75:63:52:9f:8a:16:d3:37:36:
                    3a:c0:3e:6d:8c:b3:ff:77:81:23:9d:27:3f:f9:98:
                    05:5e:ed:2b:9a:ef:be:4d:ee:2e:4c:56:c7:b2:73:
                    ba:f3:41:ea:dd:6d:d1:15:eb:5a:f7:b7:eb:05:90:
                    af:58:12:72:b1:00:34:83:a6:a0:e5:25:6f:3d:e3:
                    a0:3f:33:53:8b:6a:22:89:8d:18:cf:33:9d:e9:3e:
                    06:5a:89:0e:9f:bf:08:ae:b3:d5:c0:52:2f:d1:69:
                    9b:b9:39:97:4b:5e:8d:59:58:72:04:50:91:b9:62:
                    d7:98:9b:2f:aa:01:e3:ed:db:f1:bb:86:6a:84:aa:
                    bc:75:f9:7f:22:2d:7f:a8:62:89:a0:eb:0a:02:e3:
                    24:e1:81:60:ad:e0:dd:83:fc:5b:54:ca:55:1a:25:
                    99:66:88:aa:62:bf:7e:5f:ae:9e:7d:58:96:37:f6:
                    b1:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:1D:52:7E:DD:2C:35:27:4C:99:5B:5D:68:47:9C:B0:68:D9:A6:AA
            X509v3 Authority Key Identifier:
                keyid:CC:95:D6:B1:D2:D0:DB:C3:8C:7E:7A:AA:A3:95:D2:22:49:D4:91:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AqEDqu5RNh8FtMjeyGnkWhPCVgLS2uqf4ymRhUK7r9EV/1/CC95D6B1D2D0DBC38C7E7AAAA395D22249D491DB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CC95D6B1D2D0DBC38C7E7AAAA395D22249D491DB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AqEDqu5RNh8FtMjeyGnkWhPCVgLS2uqf4ymRhUK7r9EV/1/323830343a353938343a623430303a3a2f34302d3430203d3e20323730393636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5984:b400::/40

    Signature Algorithm: sha256WithRSAEncryption
         d7:a6:05:3d:4c:b3:1b:c7:31:54:dc:96:7e:99:87:24:ac:c5:
         e6:b8:84:98:bc:ba:cf:ca:79:07:6d:88:5e:82:2d:8d:9c:80:
         a2:e8:fe:69:04:14:47:e7:47:4a:ef:af:b7:1c:1f:2d:81:5a:
         47:d9:16:4c:dc:05:e7:56:f8:f5:20:f1:ac:72:a1:6d:cb:b9:
         4b:54:b1:41:aa:24:e0:7c:1b:0a:3c:8d:dc:d8:5e:87:cc:c8:
         74:99:35:fb:58:ea:e8:b3:4e:26:c7:5a:a6:ae:65:f2:af:d1:
         cf:a4:37:92:f6:b7:08:c6:28:45:e9:ea:21:d1:3f:ca:6c:07:
         d5:92:48:93:f4:fa:9c:02:8a:0c:c7:f1:35:7a:70:c0:2e:09:
         34:b6:b9:94:38:ec:e6:1a:55:a5:6c:a2:b1:2b:35:5b:ad:31:
         82:82:df:db:a3:f0:18:f0:43:fd:de:7e:fb:4b:39:b5:76:30:
         42:39:3d:ac:5a:ac:fd:fe:03:34:ab:73:9a:ea:62:2c:34:22:
         b1:02:18:cd:2e:52:d6:10:d4:09:06:6b:b5:45:3e:b0:fa:75:
         7a:0c:a0:2e:93:2c:72:7c:23:be:11:bc:27:63:d2:da:c2:c2:
         c5:46:54:c5:a4:11:60:3b:91:25:26:2d:d8:f3:e8:ae:4d:db:
         7f:e1:1e:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:13 2024 by rpki-client on console-fra.rpki-client.org